Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File:                     1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier:          jHpTcU5dRt09szyDdWredtB3ovq7fA7VAgi8RAxjhps=
Subject key identifier:   E4:84:88:27:E7:CC:37:77:3C:45:E0:E1:B4:1A:F0:96:D7:A7:82:19
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer:       /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial:       01A04CF717A7AB3D4E6B60441BA50B0D7260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number:          0F10
Signing time:             Sat 29 Aug 2026 10:00:56 +0000
Manifest this update:     Sat 29 Aug 2026 10:00:56 +0000
Manifest next update:     Sun 30 Aug 2026 10:00:56 +0000
Files and hashes:         1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: fbtJTqUp4hNXlIhPNeo+J+1Yu9tXpxqit/pDz5IBVXI=)
                          2: DLDa9wddn_4RFw765Gxy0no1W_4.roa (hash: z3tqPz4baapq7OlV/u29WEMBNiS4i7rakp151gvivTQ=)
                          3: m2WjaGlBAPztzFvBOucPXcVz1A8.roa (hash: 8IEpJ0cdndWX7mjoIio/qLWep6snHpr/fCFNjySaEQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Aug 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:4c:f7:17:a7:ab:3d:4e:6b:60:44:1b:a5:0b:0d:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
        Validity
            Not Before: Aug 29 10:00:56 2026 GMT
            Not After : Aug 30 10:00:56 2026 GMT
        Subject: CN=e4848827e7cc37773c45e0e1b41af096d7a78219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:4c:77:0f:95:51:7e:77:91:8f:9a:70:af:
                    70:98:a8:11:64:6f:e4:e5:54:ee:5d:32:3a:dd:b9:
                    8b:9a:75:57:1f:7f:7b:3f:98:eb:4e:3d:4c:34:52:
                    06:a6:27:d7:bc:75:28:fd:a9:bb:1d:a3:03:0a:4a:
                    d7:03:f7:e5:c9:c5:27:e0:09:74:54:5e:32:9b:9b:
                    a5:1e:ab:34:ca:3e:55:62:31:2f:57:75:92:4b:91:
                    dc:27:75:6f:78:90:64:11:b2:d1:86:05:af:a1:ef:
                    3d:e5:2a:f6:5b:96:97:89:fd:a8:3f:63:03:23:35:
                    90:63:35:e9:be:54:12:a3:21:9e:fb:0c:aa:0c:d3:
                    6b:45:70:4d:d0:73:b6:a0:ff:6a:2e:8e:fe:58:0f:
                    14:48:25:4f:7f:2f:f2:9b:fc:f8:bc:74:88:26:3d:
                    4f:f3:43:f7:a4:89:7b:0e:89:a7:0d:f8:db:97:21:
                    39:b7:bf:e0:e6:6a:1c:73:f1:d0:c2:28:24:1e:6f:
                    16:e3:33:ee:c9:8c:fd:bb:5a:fa:40:af:51:b4:0a:
                    0a:26:0c:4c:5f:b6:6e:ad:e2:ef:9a:97:d5:b8:4d:
                    c2:78:3a:27:33:50:25:b1:d7:a9:4e:32:c5:8f:44:
                    f1:ab:25:18:c1:2f:30:f9:ed:db:55:40:d5:70:f9:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:88:27:E7:CC:37:77:3C:45:E0:E1:B4:1A:F0:96:D7:A7:82:19
            X509v3 Authority Key Identifier:
                keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:69:7f:35:f8:c0:e5:50:4f:68:c2:10:df:d8:06:d0:4e:4e:
         58:bc:49:df:b8:ca:7b:96:45:64:02:15:5c:31:b8:f2:4f:b5:
         c7:5d:51:50:ab:a5:cc:6d:70:88:78:f1:5f:00:31:c2:ef:40:
         2b:d7:23:9d:96:77:8b:bf:53:3f:ea:a7:84:61:49:d2:7d:08:
         dd:04:fd:e6:7d:4c:34:ec:0c:47:0f:e0:29:9a:90:a4:26:e7:
         72:01:e4:55:e5:da:c5:7b:ab:81:38:71:9a:4e:39:94:e8:3b:
         cc:a4:2f:e1:e5:46:63:a8:b5:e8:24:aa:55:5f:f1:b7:56:cf:
         f8:89:6b:59:15:6c:2a:1d:4f:04:55:92:8e:80:e7:03:c9:cf:
         a0:74:ab:78:17:ae:1b:9c:54:ac:1c:47:0e:fb:44:7e:4b:85:
         5d:a5:a7:a1:ad:31:11:43:f6:e6:63:67:35:3c:3c:f5:ac:34:
         b9:13:9f:d1:21:1e:4c:51:dc:a6:c7:93:c3:0c:6b:06:90:31:
         b1:dd:ab:4e:3f:a5:2c:45:4c:15:c8:fe:1c:62:81:59:78:07:
         3d:16:c4:86:bc:ab:34:8f:c6:85:fe:45:ff:99:4d:af:4d:d5:
         a2:c1:38:f0:61:77:b0:74:3b:9f:97:e0:b5:05:be:17:65:72:
         29:0b:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 14:06:16 2026 by rpki-client